Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xwe_iggQJpVX6LaFteGaH97n2VI.roa
File: Xwe_iggQJpVX6LaFteGaH97n2VI.roa (raw, json)
Hash identifier: ZIkRBKxDt3ZkZpKWqcoy67VWlie4dEm67dYyhvqSG3k=
Subject key identifier: 5F:07:BF:8A:08:10:26:95:57:E8:B6:85:B5:E1:9A:1F:DE:E7:D9:52
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B5B835908EABDF3B2E826DB854878BEA0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xwe_iggQJpVX6LaFteGaH97n2VI.roa
Signing time: Mon 23 Oct 2023 07:50:16 +0000
ROA not before: Mon 23 Oct 2023 07:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 81.5.189.0/24 maxlen: 24
89.213.4.0/24 maxlen: 24
82.153.65.0/24 maxlen: 24
82.152.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 07:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:83:59:08:ea:bd:f3:b2:e8:26:db:85:48:78:be:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 23 07:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f07bf8a0810269557e8b685b5e19a1fdee7d952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:3b:67:c0:40:eb:05:20:2c:9a:6e:3c:27:
43:a2:5a:f4:4b:82:ed:83:b6:ac:ce:eb:b1:37:5b:
6f:6b:45:85:e9:b7:86:a4:d1:36:3c:ac:a7:87:60:
9f:51:70:3f:91:1f:1c:b4:5f:bd:36:54:b5:e6:37:
3e:31:5e:62:15:e3:6f:f5:a9:8d:6c:e1:66:a1:1e:
02:18:61:b6:f0:f3:35:2f:62:4e:0d:11:d7:1a:c4:
95:e8:8e:6d:9c:1e:ef:f7:1f:28:55:9c:c0:23:bd:
ce:69:58:b0:65:84:54:91:eb:f9:07:b9:6f:cd:7c:
77:38:09:64:36:59:4e:bf:1f:ae:7a:0d:15:9f:66:
bb:dc:5c:23:97:ec:7d:df:9a:b8:be:ac:1a:ba:5d:
e1:20:d0:ec:9c:06:19:ac:60:b3:84:79:c7:51:27:
5a:70:01:f3:cd:9e:db:72:79:30:fd:3d:fd:aa:86:
24:ab:b1:b6:1f:9d:8d:6f:74:ec:97:39:a8:e1:16:
12:c8:69:19:4e:e5:42:6f:aa:ed:f0:bc:a3:9d:98:
96:b1:ac:7f:88:33:33:a3:c4:71:b5:de:f8:c2:96:
1c:d5:71:49:5a:81:5e:2e:46:e5:ce:3e:ef:eb:12:
48:b0:52:44:0e:62:a4:de:18:f0:32:d5:e4:3d:a2:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:07:BF:8A:08:10:26:95:57:E8:B6:85:B5:E1:9A:1F:DE:E7:D9:52
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Xwe_iggQJpVX6LaFteGaH97n2VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.152.49.0/24
82.153.65.0/24
89.213.4.0/24
Signature Algorithm: sha256WithRSAEncryption
03:27:9f:83:b2:26:0b:3f:11:ce:ae:5a:7f:7a:6c:97:bf:28:
68:e3:5c:87:a4:21:48:b0:ca:fd:57:c2:01:e0:c7:dd:ff:fb:
03:b6:79:4e:c3:6f:96:b5:3a:c4:d9:e1:8c:62:48:bb:a5:28:
7e:6f:80:dd:08:8c:72:96:c7:81:2a:dc:e0:c1:6f:cb:9b:fd:
b6:db:c3:7e:0a:2e:87:70:3c:f8:70:fb:e8:ad:1d:9d:93:8f:
7c:41:6f:9d:a6:36:81:c0:86:46:2c:e5:6a:d3:d6:4c:86:5b:
14:fc:68:86:86:31:5e:18:a7:e1:e0:ee:7f:d4:6c:ee:41:24:
7e:b3:08:8c:2b:d6:d7:44:58:4b:b3:18:b8:59:16:78:90:2b:
d0:cc:37:5c:d3:8e:01:19:11:64:66:29:57:49:36:a9:8e:63:
51:5f:19:0d:d6:ec:db:c7:ec:3a:d6:aa:4b:3c:6c:26:b1:29:
0f:95:31:ff:fe:d5:20:ed:90:49:d9:e9:8c:7e:82:f7:18:5f:
55:87:81:fe:d2:fb:7e:d3:31:4a:a4:cb:2a:d5:73:80:df:7e:
8d:ea:b1:98:ef:8e:b5:3b:96:4d:ad:b4:f3:98:a5:77:11:96:
c8:26:da:67:1d:48:09:d4:09:e8:4b:21:dd:7f:71:75:34:7c:
f4:c2:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:24 2024 by rpki-client on console-ams.rpki-client.org